Report: CVE-2026-32923 - OpenClaw < 2026.3.11 - Authorization Bypass in Discord Guild Reaction Allowlist

Report: CVE-2026-32923 - OpenClaw < 2026.3.11 - Authorization Bypass in Discord Guild Reaction Allowlist

CVE ID :CVE-2026-32923 Published : March 29, 2026, 1:17 p.m. | 1 hour, 33 minutes ago Description :OpenClaw before 2026.3.11 contains an authorization bypass vulnerability in Discord guild reaction ingestion that fails to enforce member users and roles allowlist checks. Non-allowlisted guild members can trigger reaction events accepted as trusted system events, injecting reaction text into downstream session context. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
March 29, 2026